CVE-2019-20445

一、漏洞信息
 漏洞编号：[CVE-2019-20445](https://nvd.nist.gov/vuln/detail/CVE-2019-20445)
 漏洞归属组件：[netty3](https://gitee.com/src-openeuler/netty3)
 漏洞归属的版本：3.10.6
 CVSS V3.0分值：
  BaseScore：9.1 Critical
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
 漏洞简述：
  HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
 漏洞公开时间：2020-01-30 05:15:11
 漏洞创建时间：2024-08-27 18:49:20
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2019-20445
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0497 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0567 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0601 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0605 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0606 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0804 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0805 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0806 |  |
| cve.mitre.org | https://access.redhat.com/errata/RHSA-2020:0811 |  |
| cve.mitre.org | https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final |  |
| cve.mitre.org | https://github.com/netty/netty/issues/9861 |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r030beff88aeb6d7a2d6cd21342bd18686153ce6e26a4171d0e035663@%3Cissues.flume.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r46f93de62b1e199f3f9babb18128681677c53493546f532ed88c359d@%3Creviews.spark.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r4ff40646e9ccce13560458419accdfc227b8b6ca4ead3a8a91decc74@%3Cissues.flume.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r81700644754e66ffea465c869cb477de25f8041e21598e8818fc2c45@%3Cdev.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rb5c065e7bd701b0744f9f28ad769943f91745102716c1eb516325f11@%3Cissues.spark.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rbdb59c683d666130906a9c05a1d2b034c4cc08cda7ed41322bd54fe2@%3Cissues.flume.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E |  |
| cve.mitre.org | https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E |  |
| cve.mitre.org | https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html |  |
| cve.mitre.org | https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html |  |
| cve.mitre.org | https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html |  |
| cve.mitre.org | https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html |  |
| cve.mitre.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/ |  |
| cve.mitre.org | https://usn.ubuntu.com/4532-1/ |  |
| cve.mitre.org | https://www.debian.org/security/2021/dsa-4885 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-20445 | https://bugzilla.suse.com/show_bug.cgi?id=1162190 |
| suse_bugzilla | https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final | https://bugzilla.suse.com/show_bug.cgi?id=1162190 |
| suse_bugzilla | https://github.com/netty/netty/issues/9861 | https://bugzilla.suse.com/show_bug.cgi?id=1162190 |
| suse_bugzilla | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20445 | https://bugzilla.suse.com/show_bug.cgi?id=1162190 |
| redhat_bugzilla | https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://github.com/netty/netty/issues/9861 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r81700644754e66ffea465c869cb477de25f8041e21598e8818fc2c45@%3Cdev.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0497 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/security/cve/cve-2019-20445 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0601 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://github.com/elastic/elasticsearch/issues/49396 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0567 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0811 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0806 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0804 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0805 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0922 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0939 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:0951 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:1445 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:2321 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:2333 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:3192 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:3196 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2020:3197 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/support/policy/updates/jboss_notes | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2021:3140 | https://bugzilla.redhat.com/show_bug.cgi?id=1798509 |
| ubuntu | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20445 | https://ubuntu.com/security/CVE-2019-20445 |
| ubuntu | https://github.com/netty/netty/issues/9861 | https://ubuntu.com/security/CVE-2019-20445 |
| ubuntu | https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final | https://ubuntu.com/security/CVE-2019-20445 |
| ubuntu | https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E | https://ubuntu.com/security/CVE-2019-20445 |
| ubuntu | https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E | https://ubuntu.com/security/CVE-2019-20445 |
| ubuntu | https://ubuntu.com/security/notices/USN-4532-1 | https://ubuntu.com/security/CVE-2019-20445 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/netty/netty/pull/9865 |  | github_advisory |
|  |  | https://access.redhat.com/errata/RHSA-2020:0497 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0567 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0601 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0605 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0606 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0804 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0805 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0806 |  | nvd |
|  |  | https://access.redhat.com/errata/RHSA-2020:0811 |  | nvd |
|  |  | https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final |  | nvd |
|  |  | https://github.com/netty/netty/issues/9861 |  | nvd |
|  |  | https://lists.apache.org/thread.html/r030beff88aeb6d7a2d6cd21342bd18686153ce6e26a4171d0e035663@%3Cissues.flume.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r46f93de62b1e199f3f9babb18128681677c53493546f532ed88c359d@%3Creviews.spark.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r4ff40646e9ccce13560458419accdfc227b8b6ca4ead3a8a91decc74@%3Cissues.flume.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r81700644754e66ffea465c869cb477de25f8041e21598e8818fc2c45@%3Cdev.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rb5c065e7bd701b0744f9f28ad769943f91745102716c1eb516325f11@%3Cissues.spark.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rbdb59c683d666130906a9c05a1d2b034c4cc08cda7ed41322bd54fe2@%3Cissues.flume.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E |  | nvd |
|  |  | https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E |  | nvd |
|  |  | https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html |  | nvd |
|  |  | https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html |  | nvd |
|  |  | https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html |  | nvd |
|  |  | https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html |  | nvd |
|  |  | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/ |  | nvd |
|  |  | https://usn.ubuntu.com/4532-1/ |  | nvd |
|  |  | https://www.debian.org/security/2021/dsa-4885 |  | nvd |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
      HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.  
 openEuler评分：
  9.1
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
 受影响版本排查(受影响/不受影响)：
  1.master(3.10.6):受影响
2.openEuler-20.03-LTS-SP4(3.10.6):受影响
3.openEuler-22.03-LTS-SP1(3.10.6):受影响
4.openEuler-22.03-LTS-SP3(3.10.6):受影响
5.openEuler-24.03-LTS(3.10.6):受影响
6.openEuler-24.03-LTS-Next(3.10.6):受影响
7.openEuler-22.03-LTS-SP4(3.10.6):受影响

修复是否涉及abi变化(是/否)：
  1.master(3.10.6):否
2.openEuler-20.03-LTS-SP4(3.10.6):否
3.openEuler-22.03-LTS-SP1(3.10.6):否
4.openEuler-22.03-LTS-SP3(3.10.6):否
5.openEuler-24.03-LTS(3.10.6):否
6.openEuler-24.03-LTS-Next(3.10.6):否
7.openEuler-22.03-LTS-SP4(3.10.6):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-2103

src-openEuler/netty3

内容风险标识

评论 (5)

src-openEuler/netty3 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2019-20445

评论 (5)

搜索帮助

src-openEuler/netty3